Forgot your password?
typodupeerror

Comment Re:The title seems kind of wrong (Score 5, Informative) 68

You're looking at an older copy of the crypt man page. Compare the two from current Debian and Debian from 5 years ago. Current Debian returns a string starting with "*" so that older applications fail closed (as explained in the man page).

https://manpages.debian.org/tr...
https://manpages.debian.org/bu...

Comment Re:The title seems kind of wrong (Score 5, Insightful) 68

For legacy reasons, Crypt() is not allowed to return a null pointer. Some old applications do not expect a null pointer and will crash. On error, it instead returns a string that starts with *. In GNU C the string starts with * and then has a partial, invalid hash. In Musl C it just has the *. Crypt() never returns * on success.

Check the man page.

Comment Re:The title seems kind of wrong (Score 2) 68

No, if you read the man page for crypt, a failed return is supposed to start with the "*" character while a successful run will not contain a * character anywhere. GNU libc returns a * followed by additional characters while musl C only returns the *. OpenSSH failed to check whether the crypt output started with *, signaling an error.

That's an OpenSSH bug.

Slashdot Top Deals

"Text processing has made it possible to right-justify any idea, even one which cannot be justified on any other grounds." -- J. Finnegan, USC.

Working...